Justin Kopepasah

<p>Strict Security Headers is a straightforward and lightweight plugin designed to enhance the security of your WordPress website by implementing modern security headers. Simply activate the plugin, and the headers are automatically added, there’s absolutely no configuration needed!</p>
<h3>Features</h3>
<ol>
<li><strong>Simple and Lightweight:</strong> No configuration needed, just activate the plugin to enhance your website security.</li>
<li><strong>Enhanced Security:</strong> Helps in protecting your website against various types of attacks and vulnerabilities.</li>
<li><strong>No Performance Impact:</strong> Strict Security Headers is developed to have minimal impact on your website’s performance.</li>
</ol>
<h3>Additional Notes</h3>
<p>For any issues, queries, or enhancements, please refer to the plugin support forum. Regular updates and enhancements will be rolled out to ensure optimum functionality and security of the plugin.</p>
<p>Please consider sponsoring development to support the continued development and maintenance of this plugin: https://github.com/sponsors/kopepasah</p>


Strict Security Headers

Easily enable modern security headers for your website with the Strict Security Headers plugin, with no configuration required.

Dimitar Ivanov

<p>HTTP Headers gives your control over the http headers returned by your blog or website.</p>
<p>Headers supported by HTTP Headers includes:</p>
<ul>
<li>Access-Control-Allow-Origin</li>
<li>Access-Control-Allow-Credentials</li>
<li>Access-Control-Max-Age</li>
<li>Access-Control-Allow-Methods</li>
<li>Access-Control-Allow-Headers</li>
<li>Access-Control-Expose-Headers</li>
<li>Age </li>
<li>Content-Security-Policy</li>
<li>Content-Security-Policy-Report-Only</li>
<li>Cache-Control</li>
<li>Clear-Site-Data</li>
<li>Connection</li>
<li>Content-Encoding</li>
<li>Content-Type</li>
<li>Cross-Origin-Embedder-Policy</li>
<li>Cross-Origin-Opener-Policy</li>
<li>Cross-Origin-Resource-Policy</li>
<li>Expect-CT</li>
<li>Expires</li>
<li>Feature-Policy</li>
<li>NEL</li>
<li>Permissions-Policy</li>
<li>Pragma</li>
<li>P3P</li>
<li>Referrer-Policy</li>
<li>Report-To</li>
<li>Strict-Transport-Security</li>
<li>Timing-Allow-Origin</li>
<li>Vary</li>
<li>WWW-Authenticate</li>
<li>X-Content-Type-Options</li>
<li>X-DNS-Prefetch-Control</li>
<li>X-Download-Options</li>
<li>X-Frame-Options</li>
<li>X-Permitted-Cross-Domain-Policies</li>
<li>X-Powered-By</li>
<li>X-Robots-Tag</li>
<li>X-UA-Compatible</li>
<li>X-XSS-Protection</li>
</ul>


HTTP Headers

Great plugin with a huge amount of settings. Despite the complexity of the setup, the developers have added comments with links to full help. It helps a lot that the comments are also translated into Russian.
After setting up the plugin, be sure to check both the functionality of the site and the speed indicators. Some settings may slow down the site loading speed.

Wonderful

HTTP Headers adds CORS & security HTTP headers to your website.

Strict Security Headers vs HTTP Headers